When you add access to users, the grant duration fields have the following functionality:
If both grant duration fields, Start Date and End Date, are specified, then it means that role/account/entitlement will be provisioned on the specified start date only, and it will be revoked on the specified end date.
If only Start Date is specified, then role/account/entitlement will be provisioned on the specified start date, and there is no end date applicable for the access.
If only End Date is specified, then role/account/entitlement will be provisioned immediately, and role/account/entitlement will be revoked automatically on end date.
If both the grant duration fields are not specified, then role/account/entitlement will be provisioned immediately, and role/account/entitlement to entity remains with the user indefinitely.
If the operation requires approval, then role/account/entitlement will be provisioned only after approval is done and start date is reached (if specified).
If the operation does not require approval, then role/account/entitlement will be provisioned only after start date is reached (if specified).
If the grant date is set to a future date, then the access is displayed in the following manner:
For roles: The Assigned on date is not displayed if a future start date is set.
For entitlements: The access is displayed with the Future Grant status in the user's entitlements tab.
For accounts: The account will be in disabled state until the start date is reached.
For information about specifying grant duration, see steps 13 and 14 of "Requesting Access for Self" for information about specifying grant duration when requesting roles/accounts/entitlements for self. The same steps apply for specifying grant duration while requesting access for other users.